stats.stacksma.sh

Issued by R3

About this certificate

This digital certificate with serial number 04:63:0c:6d:d7:c3:28:49:92:f4:91:f2:b6:44:6f:0c:04:88 was issued on by Let's Encrypt.

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=stats.stacksma.sh

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:63:0c:6d:d7:c3:28:49:92:f4:91:f2:b6:44:6f:0c:04:88
Serial Number (int): 382153619124700918577401441026216024605832
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: bb:13:e6:b3:3c:3a:10:df:6e:4e:7f:86:7f:32:ea:1d:60:72:65:82
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ed:65:ac:82:2f:08:e1:d1:f4:3d:27:0d:2d:78:47:57:ab:fd:7b:a9
Fingerprint (sha256): 50:80:18:0d:8c:a2:9a:4e:98:ba:00:48:3b:ea:ba:66:b2:8b:4e:54:ab:74:08:05:46:6f:37:0a:17:8f:d8:f8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate stats.stacksma.sh

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stats.stacksma.sh

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

50statessocialclub.com
actionsspeaklouder.com
ad-vantageemb.com
aiandries.com
amrittam.in
aob.istlm.com
astrologyblogs.com
beanlee.com
caledonhomebuyers.com
chinadeluxe.com
conservativepac.net
gauravinodasaraswatsanga.com
houstonchillerparts.com
kingsburycounty.com
ljj.co.in
michianasalvage.com
nanograms.com
petboutique.in
poisonivyquote.com
profoundseo.com
quadvalue.com
roofrejuvenationsarasota.com
rxsugardogsnax.com
stats.stacksma.sh
theartofsex.com
wedding.wessendarp.com
www.geologicstorage.com
zinnia.email

Other certificates including the domain name stacksma.sh

(limited to 100 certificates)
img.stacksma.sh
aflk.horan.id.au
stacksma.sh
stacksma.sh
internet.yoga
umidigitalfaith.org
houle.page
tools.stacksma.sh
stacksma.sh
stats.stacksma.sh
onlyyoucandoit.ca
stats.stacksma.sh
aflk.horan.id.au
stacksma.sh
bassclarinetexcerpts.org
hackme.stacksma.sh
tools.stacksma.sh
stats.stacksma.sh
stacksma.sh
customlinksyt.stacksma.sh
stacksma.sh
stacksma.sh
stacksma.sh
www.stacksma.sh
stacksma.sh
tuna.vc
tools.stacksma.sh
stacksma.sh
stacksma.sh
hackme.stacksma.sh
tools.stacksma.sh
stacksma.sh

Certificate

The complete raw certificate details for stats.stacksma.sh in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHAjCCBeqgAwIBAgISBGMMbdfDKEmS9JHytkRvDASIMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA1MjEwMjQyMzBaFw0yNDA4MTkwMjQyMjlaMBwxGjAYBgNVBAMT
EXN0YXRzLnN0YWNrc21hLnNoMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3KCZQdsviQAehevqPtv0I3XFmk1yVkYgeawJjPeC0jR3MZTDOtVmxBPf0RfL
oUKJ78CkHE+oHSTVKGVTQxUkyDpjv6tcH2O9Lg4/8V9OjErdawuW5E8d9EqUUR5M
xEur1xvqLH1YW4zSbuEOA0QXa5W4RgzKjcoBI4n4btjARpP1d/Xx4fzIVDJvvuBU
q7XRrAECDZMrXr+guMQPsI+Gp95nCXh1L42uXoACNS0gYkmRsxjEgCPz5PxupkSj
FDQca837ptffVfidklAyHUGOCFm11Z14f6Ec7J4DWllgcIYPC5k00o1Y+Q7xUq+v
3bme2JlxxlPebev7asKm9UW62QIDAQABo4IEJjCCBCIwDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G
A1UdDgQWBBS7E+azPDoQ325Of4Z/MuodYHJlgjAfBgNVHSMEGDAWgBQULrMXt1hW
y65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6
Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iu
b3JnLzCCAi0GA1UdEQSCAiQwggIgghY1MHN0YXRlc3NvY2lhbGNsdWIuY29tghZh
Y3Rpb25zc3BlYWtsb3VkZXIuY29tghFhZC12YW50YWdlZW1iLmNvbYINYWlhbmRy
aWVzLmNvbYILYW1yaXR0YW0uaW6CDWFvYi5pc3RsbS5jb22CEmFzdHJvbG9neWJs
b2dzLmNvbYILYmVhbmxlZS5jb22CFWNhbGVkb25ob21lYnV5ZXJzLmNvbYIPY2hp
bmFkZWx1eGUuY29tghNjb25zZXJ2YXRpdmVwYWMubmV0ghxnYXVyYXZpbm9kYXNh
cmFzd2F0c2FuZ2EuY29tghdob3VzdG9uY2hpbGxlcnBhcnRzLmNvbYITa2luZ3Ni
dXJ5Y291bnR5LmNvbYIJbGpqLmNvLmlughNtaWNoaWFuYXNhbHZhZ2UuY29tgg1u
YW5vZ3JhbXMuY29tgg5wZXRib3V0aXF1ZS5pboIScG9pc29uaXZ5cXVvdGUuY29t
gg9wcm9mb3VuZHNlby5jb22CDXF1YWR2YWx1ZS5jb22CHHJvb2ZyZWp1dmVuYXRp
b25zYXJhc290YS5jb22CEnJ4c3VnYXJkb2dzbmF4LmNvbYIRc3RhdHMuc3RhY2tz
bWEuc2iCD3RoZWFydG9mc2V4LmNvbYIWd2VkZGluZy53ZXNzZW5kYXJwLmNvbYIX
d3d3Lmdlb2xvZ2ljc3RvcmFnZS5jb22CDHppbm5pYS5lbWFpbDATBgNVHSAEDDAK
MAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AD8XS0/XIkdYlB1l
HIS+DRLtkDd/H4Vq68G/KIXs+GRuAAABj5k+VhsAAAQDAEcwRQIhAOj50QlmVXts
sENECC6KW9j3Y6aQW6u6PhkaBCi8uJcQAiAuX6VGahocmqA5x6u15msbMQZnKnbI
AZrPa5u4ohRvGAB2AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAAB
j5k+VhsAAAQDAEcwRQIhAKb3hwML5GS5DatNWdIrLU2GfyVHf7BdhpDe2Oa0yVfg
AiBo5GtC+jusFHk4vq7gvxTWMJGeOGqzyMxbf1tiYL4urDANBgkqhkiG9w0BAQsF
AAOCAQEAJSST1WcgOtEb+hTJtzOjE4OFAdpfk0E3J3iVI8yzRdWbYlJ0+JtHL/PJ
9zQonI1dkK9WABQoVZZ+Q7zebPeAZa7V+GG8LIVcvvwrwWp9xzgypN5EKNbCoiLO
IVQvyYg40L2fXHNHD8Q0dDdIkcHO26rLEN2tFSFRPICuRDLzYCRhq4yfNDCkUajR
+9EzZuVYNS7w76gYzGb43Vi7i8p8v7Aud+eI0Ag2vqZdI0OlRBGAS0618rQ3JgXZ
9i1ZF3KRIqkUoQrbopajH82Umlp70V36p2AO1sdp+REwvxnVKGVAcK1YJolVt+ue
nyMH8y/mMqkWFXt5o95YvHN5PZgftw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KCZQdsviQAehevqPtv0
I3XFmk1yVkYgeawJjPeC0jR3MZTDOtVmxBPf0RfLoUKJ78CkHE+oHSTVKGVTQxUk
yDpjv6tcH2O9Lg4/8V9OjErdawuW5E8d9EqUUR5MxEur1xvqLH1YW4zSbuEOA0QX
a5W4RgzKjcoBI4n4btjARpP1d/Xx4fzIVDJvvuBUq7XRrAECDZMrXr+guMQPsI+G
p95nCXh1L42uXoACNS0gYkmRsxjEgCPz5PxupkSjFDQca837ptffVfidklAyHUGO
CFm11Z14f6Ec7J4DWllgcIYPC5k00o1Y+Q7xUq+v3bme2JlxxlPebev7asKm9UW6
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 382153619124700918577401441026216024605832
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-21 02:42:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-19 02:42:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stats.stacksma.sh'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27851621243945391170186736020886585126872520456238849988827337163846494136408387577410201400294014711678993895909675987237034527660436434781727685928306611232189727787096914406893176792939980042302677996445177795233906953163341371012948107341519229164898694527432063990919735772840198162451867805978652997949663852074317792343784309487674417002740319828873659565735028645754712841873325998047797842165259619155794076151685094169699868470021888204699473564113322101069632649367924788699608513940853754217444496176122685709644174304255980442166931184813772994096685403157184346509177145826732223785710947632177914165977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bb13e6b33c3a10df6e4e7f867f32ea1d60726582
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (548 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '50statessocialclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actionsspeaklouder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ad-vantageemb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiandries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amrittam.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aob.istlm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astrologyblogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beanlee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caledonhomebuyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinadeluxe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conservativepac.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gauravinodasaraswatsanga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houstonchillerparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingsburycounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ljj.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michianasalvage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanograms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petboutique.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poisonivyquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profoundseo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quadvalue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roofrejuvenationsarasota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugardogsnax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stats.stacksma.sh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theartofsex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wedding.wessendarp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geologicstorage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zinnia.email'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f993e561b0000040300473045022100e8f9d10966557b6cb04344082e8a5bd8f763a6905babba3e191a0428bcb8971002202e5fa5466a1a1c9aa039c7abb5e66b1b3106672a76c8019acf6b9bb8a2146f18007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f993e561b0000040300473045022100a6f787030be464b90dab4d59d22b2d4d867f25477fb05d8690ded8e6b4c957e0022068e46b42fa3bac147938beaee0bf14d630919e386ab3c8cc5b7f5b6260be2eac
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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